last executing test programs: 8.712464713s ago: executing program 0 (id=151): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0xffffffffffffff1a, {0x401, 0xa08, 0x9, 0xb, 0x441, 0x9, 0x7fff, 0x1ff, 0x1fb, 0x10, 0x1fe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x1e, {0x1e, 0xb, "da0b002d0e317aab145ffec9c6726b975c8df619e06d14c8d94c7558"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f00000004c0)={0x40, 0xe, 0x3b, "f16a82cfdfed5851b369a23dd0ea06a12c6ec5b58324c68fca176fe4a56c1394c8355d73a9fbaffd112d73c244e7b7f7747b7ac5537acb9105a52b"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x97}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x93}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x1, 0xfffffffc, 0x101, 0x40, 0x5, 0x800, 0x7f, 0x936, 0xc31, 0x5, 0x3}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7.746527634s ago: executing program 1 (id=158): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r0, 0x0, 0x2) (async) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x0, 0xfffffffd, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000100)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="6e185d15e7946be1990cbc816278f283ff9475a4b1901ff2a96fe4f6f2bd32290e1e0bd27a71730a7ca686e2ede4d9a944428ba332c62ce57211e9323547c9ba79fefda9472c9e517ad1b93ed589e862fa2fcd868760f91cb20dcbb00434743c082a18feca44a0392b2d6066a72ecbf6204eff00245ba60891a37c04c1649deaf931ebd78bbb2bd2bd449a9d18c86ce8fca680bc6ee05b58bd83ac78a70c84bc381679"], 0x0) 7.095435077s ago: executing program 0 (id=166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x2) clock_adjtime(0x1, &(0x7f0000000000)={0x3, 0x3, 0x2, 0xc, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffff8, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x9, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x40000000000000, 0x100000000, 0x3, 0xfffffffffffffffc, 0x10000100001, 0x0, 0x7, 0x80000000000}) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) keyctl$instantiate(0xc, r2, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6fff0000006372797074667320747275737465643a6b657972696e6700203030303030303030303030303030303030303039203037306435616100"], 0x3c, r2) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000296b073408fef6"], 0x0}, 0x0) 5.443590041s ago: executing program 0 (id=173): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x49004) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xbfb3) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) r3 = syz_open_pts(r2, 0x101000) r4 = dup3(r3, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000980)={0x60, 0x1, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x10, &(0x7f00000008c0)=[{0x3, 0x8, 0x4}, {0x10, 0x5, 0xfff}, {0x100, 0x8}, {0x3a3, 0xff, 0x101}, {0x5, 0x7, 0x5}, {0x5, 0x8, 0x7fffffffffffffff}, {0x6, 0xfffffffffffffffe, 0x6}], 0x7, 0x80000000, 0x10, 0x15, 0x64, 0x28}) (async) recvmmsg$unix(r5, &(0x7f0000000700)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000200)=""/86, 0x56}], 0x6}}], 0x1, 0x10001, &(0x7f0000000740)={0x0, 0x989680}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @empty, @loopback, 0x0, 0x0, 0x10000, 0x7}}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @remote, 0x3}, 0x1c) 5.345171444s ago: executing program 0 (id=174): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "ab14ffc1f1a33ddc8e260fc5facd74deeb2051f119a64d20af667d28e91256dff6f0fecaf48054642799"}}, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x3, 0x4, "02df9d74", "8ae46905"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x4, 0xc, 0x4, 0x2, 0xf}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0xa, 0xbb, "91aca293274d247ea7398558e2838720006835c658ab6df0fa3bed658ecd83a9cfe9b60a3b2adb850ab54c1588f0886ccbce4ab561f0b9ec78e6ee49e6d5e343df55b3c869a76e194234b8dbdce48bee0bbac4ebf1820890b036a7480d689bd07a7d5b3fef33168cca840146211d2b02e80b779a2ba307d8761c54b8b3335de4c63c0f54a5315e2a202c0b8882b584842da33bb40a7e8447f4d30c9f08602d29eebfcb789aad6cf741437aaf2008ec789db63708fedfe43536f29c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7d}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x200, 0x2, [0xf0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "9fea"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="08b6b2aba107"}, &(0x7f0000000640)={0x40, 0x17, 0x6}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x8e}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f0000000080)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x1}}, 0x2e) 4.722474935s ago: executing program 1 (id=175): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x20, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x4}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000180)={r1, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x240000, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0x4]}, {0xd, 0x2b04, 0xfffffe01}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}) 4.680687456s ago: executing program 1 (id=177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) r1 = epoll_create(0x5) (async) setresgid(0xee00, 0xee01, 0x0) r2 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r5, 0x0, 0x0, 0x0, 0x0, 0xd, @empty, @empty, 0x40, 0x8000, 0xfffffffc, 0x7fffffff}}) (async) r6 = syz_open_procfs(r2, &(0x7f0000000440)='wchan\x00') pread64(r6, &(0x7f00000000c0)=""/15, 0xf, 0x4) ppoll(&(0x7f0000000000)=[{r0, 0x2}, {r1, 0x822a}, {0xffffffffffffffff, 0x20}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x8) 4.54908103s ago: executing program 1 (id=178): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) (async) sendto$inet(r0, &(0x7f00000002c0)='\x00', 0x1, 0x2000c005, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000380)=""/235, 0xeb, 0x40010063, 0x0, 0xfd3f) (async) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000001840)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x1000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x9, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0xfffffffe, 0x2, 0x2}}}}}}}}]}}, 0x0) 3.479807015s ago: executing program 0 (id=197): modify_ldt$read(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) 3.373584129s ago: executing program 1 (id=198): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x21, 0x38, {0x38, 0x6, "8bfaa3c28dd72ff144446f04f6f2a4d43e045593e8321f201b3af8f1dddb5eac9405544b8377be00209262c85dd56d223c2071757a2b"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "48101e38"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0xb73}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x60, 0xc4e8d8b2f7c40d1e, 0x80, "b231f573ba0fcfb9766414ef89a9f377f9d656459489f3fcaedf7e1bc3ace1bfa81b9602f71694f7dad24391955232304b3040fc0a9252ab0499c0ef647c53b5a596a5df8e4daff909f99471486b83a044acadbe045a3eaf909955f73410702d5c65b1017dd0bf1de167984eaae7fdda49222f57b9f44613ec889e6b80aca195"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x1, 0xe4, "9d805785d63d1e0fe3f04e4db3af417a75f6fe106052cca6685ff366c670393806e78b2225e0865918be1c4caf6d160c84625fc770d2e58916ae0ae37b3f76d2819964e93c864123e69b8a3f846684a8ab7236a85cfa88aaaa83009a56b03a32b018ebb689e6569b227d123337f93a01db4e1dd641f4cc3daa2eae28c420f955bfbe4557d085e3b0d3b895f839c04a386612b37cd948173ec2ea0b586311007fa1c901e66f36aa6365083b8f2073dfdca625dd832fec30f811887fae670cc25016ec09b07fffd54c8c5d2e0b501a43d59101aa93df1fe1c648ea9faded2378f5b7180f6f"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x8}}) 3.059680369s ago: executing program 2 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vlan1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x40ac9000) (async, rerun: 32) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x3a00, 0x88be, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "bd7a158b8d186b6db17274a417cbe0c90a61074b6dcbdef0", "d3b46bad1ffee22d60322679af2978fca8acff45fdf3246e64ffe8ed5100db45"}}}}}}}, 0x6e) (rerun: 32) 3.02880334s ago: executing program 2 (id=202): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x2, &(0x7f0000000200)=0x0) (async, rerun: 64) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='freezer.state\x00', 0x0, 0x0) (rerun: 64) process_madvise(r3, &(0x7f00000001c0)=[{&(0x7f0000000440)="8ba9d99293ce548a772489be9f329072079fe1bae77110ef18de5bf300459c95dcf90403abfe0b2ca53e6b7259d7d3b094bf8153c962bad68fe67d9e996a3bdf4d1bc948971797606c435df85dd47cc19c747c7ef119f2ca93951b64d97fddbca42e739822b3fb45c948af563f6c38ec4ed54a959e09a9c066ad554a46f23673dbbc7641a507426fd15fe83792a114de84a0dc4244c2198cc55f1a03ac868106e2ea28509369030b522f38cb66c0ef1ee3c75372", 0xb4}], 0x1, 0xe, 0x0) (async) io_submit(r2, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) (async) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x2, 0x0, [{}, {}]}}}) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000180)={r5, &(0x7f00000000c0)='tls', 0x452302, &(0x7f0000000340)={@_ha_fsid={[0x6, 0x81]}, {0x8, 0x2, 0x9, 0x9}}, 0x200, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000100)=0x2}) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000280)={0x200000, 0x30, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, "29acaea6eecd94ea", "1b90309c137a6d1148a0e12b8c92bb2c", "39165308", "b469f98bf5d2b6cc"}, 0x28) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRESDEC=r0], 0x15c}, 0x1, 0x0, 0x0, 0x4009880}, 0x2014) 2.305445874s ago: executing program 0 (id=203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xff, 0xffffffff, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x2, 0x1, 0x6890, 0x3, 0xa3a, 'wg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @private=0xa010100, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@private=0xa010102, @local, 0xffffff00, 0xff, 0x3, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0xc, 0x801, 0x7, 0x800, 0x1, 'macvlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x540}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_on}]}) chdir(&(0x7f0000000380)='./bus\x00') read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x2020) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000800)={@flat=@binder={0x73622a85, 0x101}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x23}, @flat=@weak_binder}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000003e40), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) 2.101114861s ago: executing program 2 (id=204): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x1800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x3329, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x1800, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) (async) landlock_create_ruleset(&(0x7f00000002c0)={0x3329, 0x0, 0x2}, 0x18, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) (async) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x10) (async) 2.100436401s ago: executing program 2 (id=205): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000380), 0x8) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3169e45", 0x4, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00001000000000140005"], 0x40}], 0x1}, 0x0) ptrace$setregs(0x56a403fa828d0cf1, 0x0, 0xffffffff, &(0x7f0000000280)="7814eb1672c4bdeb9a4760d3208f0daf4791fcd193557e424e554836143d61281b0e1d543bac7e8f0bbead2613fed013981d142075054b3f43891785e527b9882d41c7886bbe6487857503c54be5a8ba5a0e262eb6b2085f9a28363c581294a95edfe2e1fd151f8d7380039d0d4759f7e65a4ec4c9e80c2f371692fece256022210512903cc6caccb93a44206672ec9d8d1df2a7d45c30501ba90605a16e68560de1eb7e2a092a4186a5a3e5a8268acebad3f156d773f1aac164b58344d61ca3f8d294d529a2693b49944aab3c4a7afa2f03e8809ee0622e014446463873df28f60c42a8b161517b6f604a59f7ffad1c34cccedf0d50") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)=@secondary) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) (async) syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid(0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') (async) read$eventfd(r0, &(0x7f0000000380), 0x8) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3169e45", 0x4, 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00001000000000140005"], 0x40}], 0x1}, 0x0) (async) ptrace$setregs(0x56a403fa828d0cf1, 0x0, 0xffffffff, &(0x7f0000000280)="7814eb1672c4bdeb9a4760d3208f0daf4791fcd193557e424e554836143d61281b0e1d543bac7e8f0bbead2613fed013981d142075054b3f43891785e527b9882d41c7886bbe6487857503c54be5a8ba5a0e262eb6b2085f9a28363c581294a95edfe2e1fd151f8d7380039d0d4759f7e65a4ec4c9e80c2f371692fece256022210512903cc6caccb93a44206672ec9d8d1df2a7d45c30501ba90605a16e68560de1eb7e2a092a4186a5a3e5a8268acebad3f156d773f1aac164b58344d61ca3f8d294d529a2693b49944aab3c4a7afa2f03e8809ee0622e014446463873df28f60c42a8b161517b6f604a59f7ffad1c34cccedf0d50") (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)=@secondary) (async) 2.100111321s ago: executing program 2 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x2, 0x0, 0x0, 0x8, 0x7, 0xc}, @mpls}, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005a0001", @ANYRES32=r1], 0x1c}], 0x1, 0x0, 0x0, 0x800}, 0x0) 1.946861616s ago: executing program 3 (id=207): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000200000e5ffffe9ff2700010001000000"], 0x1c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) sendfile(r7, r8, &(0x7f0000002b00)=0x223b, 0xffffffff) setsockopt$packet_int(r8, 0x107, 0x12, &(0x7f0000000100)=0x7, 0x4) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800013216cbdcaefa2b65136d52ee400001000000"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x80049367, &(0x7f0000000340)) (async, rerun: 64) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x14) (async, rerun: 64) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000003c0)=0x9, 0x4) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) inotify_add_watch(r10, 0x0, 0x3000004) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x1, 0x24000002) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x5000, 0x7, 0x7, 0x3, 0x7f, 0x9, 0xaf, 0x0, 0xe, 0x2, 0xb0, 0xc37b}, {0x4, 0x100, 0x7f, 0x1c, 0x3, 0xff, 0x4, 0x2, 0x23, 0x9, 0x1, 0x7b, 0x3}, {0x80000004, 0xfff4, 0x10, 0x8, 0x3, 0x7, 0x0, 0x6, 0x0, 0x4, 0x2, 0x7, 0xd0}], 0x7fffffff}) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000280)={0x4, {{0xa, 0x4e22, 0x5, @private2, 0x6}}}, 0x88) 1.777047751s ago: executing program 3 (id=208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETLINKNAME(r4, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x3, r5, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRES8=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x4008000}, 0x20040051) mount$fuse(0x0, 0x0, 0x0, 0x4009, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="6b0ae196c59f0b311ff8cd15bb8f6818feaf2003552e7a40e93899e37a"]) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xf250, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0xffffffffffffffda, 0x0, {0x101, 0x9, 0x0, {0x2, 0x0, 0xbdd2, 0x4, 0xffff, 0x5, 0x9d1e, 0xfffffffe, 0x8, 0xa000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0xcf47, 0xb39, 0xffff, 0xb, 0x0, "8003e3ffff072000"}) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r9 = syz_open_pts(r8, 0x200) r10 = dup3(r9, r8, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0xff) 1.133117803s ago: executing program 2 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB="12010000090000402505a8a440000102030109021b0001010000000904d3d1802908000000d5766614bdd0bfef113bee9e7fb21c5fa9b31cfc95ab5134a875fede7e05dc389eff97a54f534c2c059fbe5bae8ac517676b42313cf57b5c94608273b95088000000000000", @ANYBLOB="dd4ae9268838cae6018e034e8eda02b8a128b66d58d705", @ANYRES32, @ANYRES32=r0], 0x0) close(0x3) r1 = syz_usb_connect$uac1(0x0, 0xb0, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa4, 0x90, 0x5, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0x240d, 0xff, 0x1, {0x22, 0xb68}}, {{{0x9, 0x5, 0x81, 0x3, 0x3df, 0x70, 0x9}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xab, 0x0, 0xfe, 0x8, 0x20}, 0x31, &(0x7f00000000c0)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x9, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1c, 0x7d, 0xd0, 0x8000, 0x78}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2203e1903b7050433e09e749b39c3481"}, @ptm_cap={0x3}]}, 0x5, [{0xf5, &(0x7f0000000100)=@string={0xf5, 0x3, "86bf62b1fc17afb73f07e2f9ce8c45740b74c52e399ff7d65b4072d69c647e5b7b351bfecd4c561ecb14e5659d7c57eb1a020894c7a1133736461e8bab86f7350117c2ef409c88fec67e63ca9e72b84f43d6d4b6fa697e79ee7cf7d466ca665ec343e696e9559b934be1387a7f7804341f6d072384becf90b31a9021a9c29fefcfbca9b8f07d74605279bf613f92a0291b5710530121e125a98564d77f2b720dc6b51687b810276f5fd0d603e99ac1eca51d875564272fa1f6498a46451b9d0a9d2fffe19b3d76c4e0916cc7fca2cce24b0823e9d099d7e7cedd5f3199379caf04d6797d5dd107745fafa0cddb86d4557b93af"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40c}}, {0x7, &(0x7f0000000240)=@string={0x7, 0x3, "da5ba507df"}}, {0x5b, &(0x7f0000000280)=@string={0x5b, 0x3, "2448f4b94d603944a64a9f47c9f9f0b050f4ffe37aa936b4cb3eb30ea1f838c41d53b6bb6cd2ac47c98e30aed17ca79defb61aa07674b6bfb42be91b95bf5ecc4401abb6ae9bd300c5a6c8966afbee353b7e9c4de9bf581e12"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c01}}]}) 873.627201ms ago: executing program 3 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005600010600000000000000000700000000000000a89e4aa3ec7f2ca0bd7fd269f8b0d336dd18e0165469b60d0f21fe46d1103ba7f9be4d0cb3edceaaef"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 861.680711ms ago: executing program 3 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000001440)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x168, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast2, 0x4e22, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x100000000000000, 0x0, 0x1, 0x8000000000000001, 0xfffffffefffffffb, 0x10, 0x100008001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0xfffffffc, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x69, 0x12, {{'gcm(aes)\x00'}, 0xe8, 0x40, "a9b570ecee479581161af356c8eab266f0279b23f37a201b6fe9e2a0e9"}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x8}}]}, 0x168}, 0x1, 0x0, 0x0, 0x880}, 0x2090) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='|:*'], 0x58) close(r2) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x24042801, &(0x7f0000000c80)={0x11, 0x8100, r5, 0x1, 0x9, 0x6, @multicast}, 0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e6d0527ab04000180"], 0x20}], 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000a40)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet6_udp_int(r8, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvfrom(r9, 0x0, 0x0, 0x3, 0x0, 0x0) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 309.14008ms ago: executing program 1 (id=212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaaaaaaaaaabb86dd694f920600286c82b8640000000000000000000000000001ff020000000000000000000000000001890090"], 0x62) syz_usb_connect$midi(0x5, 0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000108c0d03014000010203010902440001019e000709040000030103300009050c0eff03ca0e00052501019409050f2f20007f0800052541"], 0x0) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r3, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="4011", 0x2}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20040840}}], 0x1, 0x11) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x18, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x88, 0x0, 0x89, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xf6, 0xbd, 0x3, 0x8, 0x9}, 0x5b, &(0x7f0000000080)={0x5, 0xf, 0x5b, 0x5, [@wireless={0xb, 0x10, 0x1, 0xa, 0x80, 0x6, 0x7, 0x0, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x81, 0xf000, 0x9b1d, [0x30, 0x3f30, 0xc0, 0xff3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x4b, "b76d8a9a5c08dde0b607274dc8276120"}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "104d9cf9e54d5996501c3e1cd8f5608b"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x7, 0x9}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3409}}, {0x87, &(0x7f00000001c0)=@string={0x87, 0x3, "2a0dbaaf09ec274edc1d501ae9896c33897c93278bbb5c9959a00e6b724f8db3ff3e9fee67f75dfc7624bbc07a58b3d450a85ee72fb654b57d156107215d2ce2205fca3e46286db7bde248503e1b1546274952878191a04b6de343caeaa1ec596e7f6effc35245388ed2c92b1644416305685264aa1a6f651914b681c8c482838d8a031ac7"}}]}) 18.368429ms ago: executing program 3 (id=213): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111) getresgid(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x2, 0x3, 0x6a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x6a0000e0}, 0x6e) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) openat$vga_arbiter(0xffffff9c, 0x0, 0x10000, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 0s ago: executing program 3 (id=214): socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407900110010000000000109022400010000200009040000090300000009210000fe012229000905810300"], 0x0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r2, 0x0, 0x1f00) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f0000000180)={0x40, 0xc, 0x8, {0x8, 0x11, "8296fa58355b"}}, 0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x709) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16=r2], 0x28}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000440)={0x2, 'vlan0\x00', {}, 0x4}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f0000000380)=@ethtool_channels={0x3d, 0x0, 0xd01, 0x8, 0x0, 0x2, 0x2, 0x4}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x42, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 22.445352][ T36] audit: type=1400 audit(1774855262.450:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.446402][ T283] cgroup: Unknown subsys name 'net' [ 22.468497][ T36] audit: type=1400 audit(1774855262.450:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.495847][ T36] audit: type=1400 audit(1774855262.480:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.496033][ T283] cgroup: Unknown subsys name 'devices' [ 22.681423][ T283] cgroup: Unknown subsys name 'hugetlb' [ 22.687025][ T283] cgroup: Unknown subsys name 'rlimit' [ 22.839612][ T36] audit: type=1400 audit(1774855262.850:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.863249][ T36] audit: type=1400 audit(1774855262.850:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.888193][ T36] audit: type=1400 audit(1774855262.850:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.912856][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.921862][ T36] audit: type=1400 audit(1774855262.930:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.947646][ T36] audit: type=1400 audit(1774855262.930:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.954711][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.973373][ T36] audit: type=1400 audit(1774855262.960:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.007478][ T36] audit: type=1400 audit(1774855262.960:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.321500][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.328569][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.335726][ T293] bridge_slave_0: entered allmulticast mode [ 24.342158][ T293] bridge_slave_0: entered promiscuous mode [ 24.363118][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.370374][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.377612][ T293] bridge_slave_1: entered allmulticast mode [ 24.383964][ T293] bridge_slave_1: entered promiscuous mode [ 24.418707][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.425887][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.433013][ T291] bridge_slave_0: entered allmulticast mode [ 24.439320][ T291] bridge_slave_0: entered promiscuous mode [ 24.447159][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.454450][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.461676][ T291] bridge_slave_1: entered allmulticast mode [ 24.467891][ T291] bridge_slave_1: entered promiscuous mode [ 24.494433][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.501538][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.508772][ T290] bridge_slave_0: entered allmulticast mode [ 24.515213][ T290] bridge_slave_0: entered promiscuous mode [ 24.524670][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.531911][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.539038][ T290] bridge_slave_1: entered allmulticast mode [ 24.545253][ T290] bridge_slave_1: entered promiscuous mode [ 24.593423][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.600512][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.607659][ T292] bridge_slave_0: entered allmulticast mode [ 24.614196][ T292] bridge_slave_0: entered promiscuous mode [ 24.626071][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.633194][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.640305][ T292] bridge_slave_1: entered allmulticast mode [ 24.646802][ T292] bridge_slave_1: entered promiscuous mode [ 24.782333][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.789418][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.796696][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.803744][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.816685][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.823766][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.831245][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.838281][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.857468][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.864547][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.871859][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.878885][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.900718][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.907864][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.915252][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.922730][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.942957][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.950273][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.957545][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.965569][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.973178][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.980591][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.987865][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.995365][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.017248][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.024426][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.032268][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.039337][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.046827][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.053988][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.062780][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.069858][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.113380][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.120471][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.132968][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.140059][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.171595][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.178675][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.188756][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.195821][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.208969][ T291] veth0_vlan: entered promiscuous mode [ 25.226610][ T292] veth0_vlan: entered promiscuous mode [ 25.234890][ T290] veth0_vlan: entered promiscuous mode [ 25.256481][ T290] veth1_macvtap: entered promiscuous mode [ 25.263296][ T292] veth1_macvtap: entered promiscuous mode [ 25.271837][ T291] veth1_macvtap: entered promiscuous mode [ 25.328645][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.331329][ T293] veth0_vlan: entered promiscuous mode [ 25.367824][ T293] veth1_macvtap: entered promiscuous mode [ 25.401342][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.480895][ T323] SELinux: Context system_u:object_r:cpu_online_t:s0 is not valid (left unmapped). [ 25.639411][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.706584][ T344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.790207][ T31] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 25.800710][ T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 25.809862][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.817916][ T31] usb 3-1: Product: syz [ 25.822211][ T31] usb 3-1: Manufacturer: syz [ 25.826818][ T31] usb 3-1: SerialNumber: syz [ 25.839210][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.909140][ T45] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 25.989029][ T308] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.999106][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 26.005293][ T66] usb 1-1: config 120 interface 0 has no altsetting 0 [ 26.013937][ T66] usb 1-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice=da.36 [ 26.023209][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.031253][ T66] usb 1-1: Product: syz [ 26.035606][ T66] usb 1-1: Manufacturer: syz [ 26.039003][ T45] usb 4-1: device descriptor read/64, error -71 [ 26.040825][ T66] usb 1-1: SerialNumber: syz [ 26.119027][ T308] usb 2-1: device descriptor read/64, error -71 [ 26.255536][ T66] asix 1-1:120.0: probe with driver asix failed with error -22 [ 26.265240][ T66] usb 1-1: USB disconnect, device number 2 [ 26.279051][ T45] usb 4-1: device descriptor read/64, error -71 [ 26.359342][ T308] usb 2-1: device descriptor read/64, error -71 [ 26.518984][ T45] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 26.541291][ T66] usb 3-1: USB disconnect, device number 2 [ 26.599858][ T308] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.659025][ T45] usb 4-1: device descriptor read/64, error -71 [ 26.739063][ T308] usb 2-1: device descriptor read/64, error -71 [ 26.830813][ T368] netlink: 'syz.0.18': attribute type 11 has an invalid length. [ 26.838602][ T368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18'. [ 26.899305][ T45] usb 4-1: device descriptor read/64, error -71 [ 26.979325][ T308] usb 2-1: device descriptor read/64, error -71 [ 27.009829][ T45] usb usb4-port1: attempt power cycle [ 27.061863][ T377] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 27.090325][ T308] usb usb2-port1: attempt power cycle [ 27.100329][ T381] tmpfs: Bad value for 'nr_blocks' [ 27.149002][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.308991][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 27.316156][ T66] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 27.324200][ T66] usb 1-1: can't read configurations, error -22 [ 27.349062][ T45] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 27.370178][ T45] usb 4-1: device descriptor read/8, error -71 [ 27.429123][ T308] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.450119][ T308] usb 2-1: device descriptor read/8, error -71 [ 27.469314][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.500191][ T45] usb 4-1: device descriptor read/8, error -71 [ 27.580166][ T308] usb 2-1: device descriptor read/8, error -71 [ 27.629243][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 27.636467][ T66] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 27.644722][ T66] usb 1-1: can't read configurations, error -22 [ 27.651193][ T66] usb usb1-port1: attempt power cycle [ 27.739014][ T45] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 27.760062][ T45] usb 4-1: device descriptor read/8, error -71 [ 27.819000][ T308] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 27.840094][ T308] usb 2-1: device descriptor read/8, error -71 [ 27.890073][ T45] usb 4-1: device descriptor read/8, error -71 [ 27.970707][ T308] usb 2-1: device descriptor read/8, error -71 [ 27.999036][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.999097][ T45] usb usb4-port1: unable to enumerate USB device [ 28.019494][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 28.026844][ T66] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 28.035068][ T66] usb 1-1: can't read configurations, error -22 [ 28.079122][ T308] usb usb2-port1: unable to enumerate USB device [ 28.169001][ T66] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.189339][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 28.196546][ T66] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 28.204667][ T66] usb 1-1: can't read configurations, error -22 [ 28.211046][ T353] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.218715][ T66] usb usb1-port1: unable to enumerate USB device [ 28.369014][ T353] usb 3-1: Using ep0 maxpacket: 16 [ 28.375895][ T353] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.384464][ T353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.394635][ T353] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 28.405461][ T353] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 28.414751][ T353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.422990][ T353] usb 3-1: Product: syz [ 28.427285][ T353] usb 3-1: Manufacturer: syz [ 28.432149][ T353] usb 3-1: SerialNumber: syz [ 28.617633][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 28.617652][ T36] audit: type=1400 audit(1774855268.620:151): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.656302][ T389] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 28.665421][ T389] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 28.677142][ T389] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 28.701967][ T36] audit: type=1400 audit(1774855268.710:152): avc: denied { mounton } for pid=390 comm="syz.3.28" path="/4/file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.724580][ T36] audit: type=1400 audit(1774855268.720:153): avc: denied { map } for pid=386 comm="syz.2.26" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.755750][ T36] audit: type=1400 audit(1774855268.760:154): avc: denied { mounton } for pid=390 comm="syz.3.28" path="/4/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 28.755804][ T393] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 28.806284][ T353] usb 3-1: 0:2 : does not exist [ 28.815656][ T353] usb 3-1: USB disconnect, device number 3 [ 28.826713][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.148999][ T66] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.299120][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 29.305983][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.316481][ T66] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 29.323114][ T36] audit: type=1400 audit(1774855269.320:155): avc: denied { wake_alarm } for pid=402 comm="syz.2.31" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.332087][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.354962][ T66] usb 2-1: Product: syz [ 29.359756][ T66] usb 2-1: Manufacturer: syz [ 29.364844][ T66] usb 2-1: SerialNumber: syz [ 29.391357][ T36] audit: type=1400 audit(1774855269.400:156): avc: denied { ioctl } for pid=405 comm="syz.2.32" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.433174][ T36] audit: type=1400 audit(1774855269.440:157): avc: denied { create } for pid=409 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 29.453054][ T36] audit: type=1400 audit(1774855269.450:158): avc: denied { ioctl } for pid=409 comm="syz.2.33" path="socket:[4586]" dev="sockfs" ino=4586 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 29.478828][ T36] audit: type=1400 audit(1774855269.450:159): avc: denied { getopt } for pid=409 comm="syz.2.33" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.542555][ T36] audit: type=1400 audit(1774855269.550:160): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 29.581858][ T66] usb 2-1: USB disconnect, device number 6 [ 29.809136][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.960286][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.973250][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.982608][ T45] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 29.990685][ T45] usb 4-1: Product: syz [ 29.994916][ T45] usb 4-1: SerialNumber: syz [ 30.035083][ T416] process 'syz.2.36' launched '/dev/fd/3' with NULL argv: empty string added [ 30.071196][ T422] netlink: 44 bytes leftover after parsing attributes in process `syz.0.37'. [ 30.372572][ T308] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.439313][ T444] syz.0.44 uses obsolete (PF_INET,SOCK_PACKET) [ 30.539976][ T308] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 30.548416][ T308] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 30.557332][ T308] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 30.567713][ T308] usb 3-1: config 220 has no interface number 2 [ 30.574034][ T308] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 30.588106][ T308] usb 3-1: config 220 interface 0 has no altsetting 0 [ 30.595149][ T308] usb 3-1: config 220 interface 76 has no altsetting 0 [ 30.602091][ T308] usb 3-1: config 220 interface 1 has no altsetting 0 [ 30.610519][ T308] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 30.619797][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.627774][ T308] usb 3-1: Product: syz [ 30.631949][ T308] usb 3-1: Manufacturer: syz [ 30.636550][ T308] usb 3-1: SerialNumber: syz [ 30.847154][ T308] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 30.853727][ T308] usb 3-1: No valid video chain found. [ 30.859255][ T308] usb 3-1: selecting invalid altsetting 0 [ 30.867924][ T308] usb 3-1: USB disconnect, device number 4 [ 31.013683][ T45] cdc_ncm 4-1:1.0: failed to get mac address [ 31.207098][ T460] binder: Bad value for 'stats' [ 31.212318][ T45] cdc_ncm 4-1:1.0: bind() failure [ 31.218840][ T45] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 31.229788][ T45] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 31.239070][ T45] usb 4-1: USB disconnect, device number 6 [ 31.369731][ T466] netlink: 100 bytes leftover after parsing attributes in process `syz.2.50'. [ 31.384848][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 31.391791][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 31.398883][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 31.406282][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 31.413138][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 31.420729][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 31.427497][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 31.434554][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 31.464065][ T474] netlink: 'syz.2.52': attribute type 2 has an invalid length. [ 31.471755][ T474] netlink: 1 bytes leftover after parsing attributes in process `syz.2.52'. [ 31.719009][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.734426][ T478] Zero length message leads to an empty skb [ 31.880107][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.890388][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.900018][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.909277][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.917274][ T45] usb 3-1: SerialNumber: syz [ 31.988994][ T308] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 32.038627][ T485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.126790][ T45] usb 3-1: 0:2 : does not exist [ 32.135032][ T45] usb 3-1: unit 5: unexpected type 0x0a [ 32.145361][ T45] usb 3-1: USB disconnect, device number 5 [ 32.160112][ T308] usb 4-1: config index 0 descriptor too short (expected 18980, got 36) [ 32.171676][ T308] usb 4-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 32.183665][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.184169][ T308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 32.211992][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.226289][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.242613][ T308] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 32.254033][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.265535][ T308] usb 4-1: config 0 descriptor?? [ 32.684303][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.691438][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.698489][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.705614][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.712841][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.720078][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.727133][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.734301][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.742368][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.749561][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.756617][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.763700][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.770834][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.778114][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.785208][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.792311][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.799650][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.806698][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.813814][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.821003][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.828036][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.835329][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.842602][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.849678][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.856992][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.864081][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.871170][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.878262][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.885446][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.888978][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.892631][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.907165][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.914318][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.921421][ T308] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 32.928642][ T308] uclogic 0003:5543:0781.0001: No inputs registered, leaving [ 32.936881][ T308] uclogic 0003:5543:0781.0001: hidraw0: USB HID v0.fe Device [HID 5543:0781] on usb-dummy_hcd.3-1/input0 [ 32.950437][ T308] usb 4-1: USB disconnect, device number 7 [ 32.968492][ T496] fido_id[496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 33.070211][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.081455][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.091616][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.104622][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.114274][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.123155][ T9] usb 3-1: config 0 descriptor?? [ 33.167077][ T508] IPv6: Can't replace route, no match found [ 33.331304][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 33.340309][ T9] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 33.430688][ T531] No source specified [ 33.444414][ T531] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 33.499087][ T308] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 33.650435][ T308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.658572][ T308] usb 2-1: not running at top speed; connect to a high speed hub [ 33.667312][ T308] usb 2-1: config 14 has an invalid interface number: 95 but max is 0 [ 33.668986][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 33.675710][ T308] usb 2-1: config 14 has no interface number 0 [ 33.689408][ T308] usb 2-1: config 14 interface 95 has no altsetting 0 [ 33.697684][ T308] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=da.f0 [ 33.706806][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.714885][ T308] usb 2-1: Product: syz [ 33.719190][ T308] usb 2-1: Manufacturer: syz [ 33.723808][ T308] usb 2-1: SerialNumber: syz [ 33.809035][ T9] usb 4-1: device descriptor read/64, error -71 [ 33.933347][ T308] usbserial_generic 2-1:14.95: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 33.944878][ T308] usbserial_generic 2-1:14.95: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 33.955947][ T308] usbserial_generic 2-1:14.95: device has no bulk endpoints [ 33.964539][ T308] usb 2-1: USB disconnect, device number 7 [ 34.043594][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 34.043614][ T36] audit: type=1400 audit(1774855274.050:208): avc: denied { unlink } for pid=293 comm="syz-executor" name="cgroup" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 34.076537][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.289017][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.319023][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 34.440695][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.442966][ T535] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.450536][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.453392][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 34.460165][ T535] syzkaller1: entered promiscuous mode [ 34.463634][ T31] usb 1-1: can't read configurations, error -61 [ 34.471465][ T535] syzkaller1: entered allmulticast mode [ 34.599181][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 34.689116][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.729047][ T308] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.750420][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.759377][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 34.767300][ T31] usb 1-1: can't read configurations, error -61 [ 34.774005][ T31] usb usb1-port1: attempt power cycle [ 34.799131][ T9] usb usb4-port1: attempt power cycle [ 34.878991][ T308] usb 2-1: Using ep0 maxpacket: 8 [ 34.885723][ T308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 34.895528][ T308] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.904696][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.912801][ T308] usb 2-1: Product: syz [ 34.916971][ T308] usb 2-1: Manufacturer: syz [ 34.921672][ T308] usb 2-1: SerialNumber: syz [ 35.118993][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 35.131727][ T308] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 35.140400][ T308] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 35.146795][ T308] usb 2-1: 1:1 : invalid channels 0 [ 35.149241][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.152585][ T308] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 35.167879][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.178546][ T308] usb 2-1: USB disconnect, device number 8 [ 35.186071][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 35.191455][ T9] usb 4-1: device descriptor read/8, error -71 [ 35.196007][ T31] usb 1-1: can't read configurations, error -61 [ 35.200769][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.329058][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 35.350698][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.359545][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 35.360091][ T9] usb 4-1: device descriptor read/8, error -71 [ 35.367160][ T31] usb 1-1: can't read configurations, error -61 [ 35.380016][ T31] usb usb1-port1: unable to enumerate USB device [ 35.609004][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 35.630008][ T9] usb 4-1: device descriptor read/8, error -71 [ 35.640259][ T66] usb 3-1: USB disconnect, device number 6 [ 35.748977][ T36] audit: type=1400 audit(1774855275.750:209): avc: denied { unlink } for pid=538 comm="syz.1.72" name="#3" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.776927][ T9] usb 4-1: device descriptor read/8, error -71 [ 35.782334][ T36] audit: type=1400 audit(1774855275.760:210): avc: denied { mount } for pid=538 comm="syz.1.72" name="/" dev="overlay" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.811822][ T36] audit: type=1400 audit(1774855275.760:211): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.861041][ T36] audit: type=1400 audit(1774855275.870:212): avc: denied { write } for pid=549 comm="syz.1.77" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.893079][ T36] audit: type=1400 audit(1774855275.870:213): avc: denied { map } for pid=549 comm="syz.1.77" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.899461][ T9] usb usb4-port1: unable to enumerate USB device [ 35.924528][ T36] audit: type=1400 audit(1774855275.870:214): avc: denied { execute } for pid=549 comm="syz.1.77" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.983847][ T562] netlink: 9 bytes leftover after parsing attributes in process `syz.1.80'. [ 35.995870][ T562] gretap0: entered promiscuous mode [ 36.002317][ T562] netlink: 5 bytes leftover after parsing attributes in process `syz.1.80'. [ 36.011388][ T562] 0{X: renamed from gretap0 [ 36.017598][ T562] 0{X: left promiscuous mode [ 36.024240][ T562] 0{X: entered allmulticast mode [ 36.030396][ T562] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 36.300366][ T571] capability: warning: `syz.1.83' uses 32-bit capabilities (legacy support in use) [ 36.322064][ T36] audit: type=1400 audit(1774855276.330:215): avc: denied { create } for pid=570 comm="syz.1.83" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.344539][ T36] audit: type=1400 audit(1774855276.340:216): avc: denied { ioctl } for pid=570 comm="syz.1.83" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5041 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.481622][ T576] fuse: Unknown parameter 'grQC]1AKK@ou+' [ 36.481645][ T36] audit: type=1400 audit(1774855276.490:217): avc: denied { mounton } for pid=575 comm="syz.1.85" path="/26/file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 36.580310][ T579] : renamed from vlan0 (while UP) [ 36.818987][ T353] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 36.859006][ T308] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.968977][ T353] usb 4-1: Using ep0 maxpacket: 16 [ 36.975282][ T353] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 36.986531][ T353] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 25, changing to 7 [ 36.999163][ T353] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 37.008377][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.016513][ T353] usb 4-1: Product: syz [ 37.020817][ T353] usb 4-1: Manufacturer: syz [ 37.025421][ T353] usb 4-1: SerialNumber: syz [ 37.028959][ T308] usb 3-1: Using ep0 maxpacket: 16 [ 37.036689][ T308] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 37.045168][ T308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.059012][ T308] usb 3-1: config 0 has no interface number 0 [ 37.070009][ T308] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 37.081230][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.089757][ T308] usb 3-1: Product: syz [ 37.093964][ T308] usb 3-1: Manufacturer: syz [ 37.098567][ T308] usb 3-1: SerialNumber: syz [ 37.104305][ T308] usb 3-1: config 0 descriptor?? [ 37.111013][ T308] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 37.117426][ T308] usb 3-1: No valid video chain found. [ 37.239842][ T581] can0: slcan on ptm0. [ 37.310945][ T66] usb 3-1: USB disconnect, device number 7 [ 37.458997][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.625208][ T9] usb 1-1: config 1 has an invalid interface number: 255 but max is 0 [ 37.634803][ T9] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 37.645881][ T9] usb 1-1: config 1 has no interface number 0 [ 37.652451][ T9] usb 1-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 37.665398][ T9] usb 1-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 37.679358][ T9] usb 1-1: config 1 interface 255 has no altsetting 0 [ 37.687886][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 37.697638][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.727566][ T9] usb 1-1: Product: syz [ 37.738958][ T9] usb 1-1: Manufacturer: syz [ 37.744242][ T9] usb 1-1: SerialNumber: syz [ 37.750575][ T608] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12308 sclass=netlink_xfrm_socket pid=608 comm=syz.1.91 [ 37.840078][ T581] can0 (unregistered): slcan off ptm0. [ 37.903886][ T353] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.920453][ T353] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.961104][ T353] usb 4-1: USB disconnect, device number 12 [ 37.969596][ T9] hub 1-1:1.255: bad descriptor, ignoring hub [ 37.979485][ T9] hub 1-1:1.255: probe with driver hub failed with error -5 [ 38.019075][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 38.032013][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.178980][ T9] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 38.213681][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.230119][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 38.248965][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.263391][ T31] usb 2-1: config 0 descriptor?? [ 38.330174][ T9] usb 1-1: device firmware changed [ 38.339158][ T9] usb 1-1: USB disconnect, device number 11 [ 38.421084][ T672] ======================================================= [ 38.421084][ T672] WARNING: The mand mount option has been deprecated and [ 38.421084][ T672] and is ignored by this kernel. Remove the mand [ 38.421084][ T672] option from the mount to silence this warning. [ 38.421084][ T672] ======================================================= [ 38.580359][ T66] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.659053][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 38.671511][ T31] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 38.688209][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input5 [ 38.729035][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 38.735627][ T66] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 38.743982][ T66] usb 3-1: config 0 has no interface number 0 [ 38.750130][ T66] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 38.762071][ T66] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 38.771363][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.780154][ T66] usb 3-1: Product: syz [ 38.784588][ T66] usb 3-1: Manufacturer: syz [ 38.784991][ T31] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 38.789241][ T66] usb 3-1: SerialNumber: syz [ 38.790777][ T66] usb 3-1: config 0 descriptor?? [ 38.820949][ T661] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 38.829278][ T306] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 38.840083][ T9] usb 1-1: config 1 has an invalid interface number: 255 but max is 0 [ 38.848454][ T9] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 38.859045][ T9] usb 1-1: config 1 has no interface number 0 [ 38.865171][ T9] usb 1-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 38.876742][ T9] usb 1-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 38.890455][ T9] usb 1-1: config 1 interface 255 has no altsetting 0 [ 38.898778][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 38.908202][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.916286][ T9] usb 1-1: Product: ڹ皈ꚟǓ歈섢퉙巀锊䔟跔蛋붘珷ᓋꁭ殪廏闟㑵䂚੺识蟋叡魬⧫菋灉瞅꓀⮇Ϻｫ嵓ᵶ髰ꋉ瞑좄刍㺽鉶힃 [ 38.933668][ T9] usb 1-1: Manufacturer: 潋풅䦏굝ﰊ䭫㼧鍥窸뺘䤓묊塎ಞ툖㞶쯯團ퟗﲺ籬鳴觅灴瘐䙫໒﨔䒥졁껶⸁셷ᾑ괂竀妹죈蒸퀥왁᷑㱯ʦꏃ챧⊈䐢ﲦ颱⊤㫫景栗ꍲ劰窔聒䝑䑊겮꟰崶愹㚅ⴈ密ᥐ両ꀗ㥋䆝⻓㌎ḻ掦韹囷쩎迋癉癌ⱨ❚䁫꺚➈ʪ戶ꏱй㎖춾⊤鶫頎录䂏廌럑⿞겻굡槪耠脔䳨噒 [ 38.969620][ T9] usb 1-1: SerialNumber: ꉤ㥽㤘睬ቋ눋ᜰ軆䶕翋꼥滑갯ᩪᴪ즢矈欰㩜頍೻◳雖起Ｘ햨ⴱ⌘喼럪ჸ荳ᥠ⧚厉ʾ鬞坛뜤釟歼ვꞋ뿼ꉰ砸뮄㆞䦑秙唑譧뮈陼즓夥醝䆵앏멉遰풔⻈ [ 39.000759][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.011059][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.022064][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.030258][ T661] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.031843][ T306] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 39.048046][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.057192][ T306] usb 4-1: config 0 descriptor?? [ 39.129352][ T610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.138610][ T610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.147461][ T610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.156091][ T610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.169722][ T353] usb 2-1: USB disconnect, device number 9 [ 39.202563][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 39.202582][ T36] audit: type=1400 audit(1774855279.210:250): avc: denied { listen } for pid=681 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.238099][ T36] audit: type=1400 audit(1774855279.240:251): avc: denied { read } for pid=584 comm="syz.0.89" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.267871][ T36] audit: type=1400 audit(1774855279.240:252): avc: denied { open } for pid=584 comm="syz.0.89" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.319569][ T687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.339203][ T687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.350129][ T687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.352278][ T684] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 39.369233][ T687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.392574][ T687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.408306][ T687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.443181][ T36] audit: type=1400 audit(1774855279.450:253): avc: denied { append } for pid=689 comm="syz.1.105" name="001" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.474214][ T661] rust_binder: Error in use_page_slow: ESRCH [ 39.474238][ T661] rust_binder: use_range failure ESRCH [ 39.480553][ T694] rust_binder: Error in use_page_slow: ESRCH [ 39.481534][ T306] wacom 0003:056A:0010.0004: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 39.486209][ T694] rust_binder: use_range failure ESRCH [ 39.509024][ T661] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 39.509875][ T694] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 39.515997][ T661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.522996][ T36] audit: type=1400 audit(1774855279.450:254): avc: denied { read } for pid=689 comm="syz.1.105" name="usbmon7" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.533820][ T306] wacom 0003:056A:0010.0004: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 39.563160][ T36] audit: type=1400 audit(1774855279.450:255): avc: denied { open } for pid=689 comm="syz.1.105" path="/dev/usbmon7" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.601823][ T694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.601850][ T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:75 [ 39.635622][ T36] audit: type=1400 audit(1774855279.450:256): avc: denied { ioctl } for pid=689 comm="syz.1.105" path="/dev/usbmon7" dev="devtmpfs" ino=111 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.671743][ T661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:75 [ 39.671969][ T36] audit: type=1400 audit(1774855279.480:257): avc: denied { call } for pid=659 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 39.702568][ T676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.712442][ T676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.722803][ T676] kvm: kvm [675]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 39.731677][ T676] kvm: kvm [675]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 39.795992][ T36] audit: type=1400 audit(1774855279.800:258): avc: denied { setopt } for pid=699 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.808978][ T306] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0004/input/input6 [ 39.830957][ T306] usb 4-1: USB disconnect, device number 13 [ 39.942443][ T9] hub 1-1:1.255: bad descriptor, ignoring hub [ 39.948586][ T9] hub 1-1:1.255: probe with driver hub failed with error -5 [ 39.979537][ T9] usb 1-1: USB disconnect, device number 12 [ 40.029112][ T45] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 40.073888][ T661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.082849][ T661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.091098][ T66] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 245 [ 40.158990][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.399064][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.522996][ T36] audit: type=1400 audit(1774855280.530:259): avc: denied { accept } for pid=712 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.639025][ T45] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 40.689019][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 40.769120][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.840571][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.849195][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 40.858006][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.868321][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.879082][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.888236][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.896366][ T9] usb 4-1: Product: syz [ 40.900723][ T9] usb 4-1: Manufacturer: syz [ 40.905403][ T9] usb 4-1: SerialNumber: syz [ 41.009102][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.059034][ T66] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 41.115925][ T9] usb 4-1: 0:2 : does not exist [ 41.119102][ T45] usb usb2-port1: attempt power cycle [ 41.123756][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 41.138066][ T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 41.147808][ T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 41.157462][ T9] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 41.169354][ T9] usb 4-1: USB disconnect, device number 14 [ 41.177685][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.210007][ T66] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 41.218453][ T66] usb 1-1: config 0 has no interface number 0 [ 41.224690][ T66] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 41.237669][ T66] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 41.246903][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.254986][ T66] usb 1-1: Product: syz [ 41.259305][ T66] usb 1-1: Manufacturer: syz [ 41.263989][ T66] usb 1-1: SerialNumber: syz [ 41.269358][ T66] usb 1-1: config 0 descriptor?? [ 41.274654][ T765] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 41.283992][ T66] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 6e:f7:f0:fb:c4:4e [ 41.328821][ T66] usb 3-1: USB disconnect, device number 8 [ 41.409900][ T782] syzkaller1: entered promiscuous mode [ 41.415531][ T782] syzkaller1: entered allmulticast mode [ 41.459012][ T45] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 41.480088][ T45] usb 2-1: device descriptor read/8, error -71 [ 41.609990][ T45] usb 2-1: device descriptor read/8, error -71 [ 41.687320][ T306] usb 1-1: USB disconnect, device number 13 [ 41.693862][ T306] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 41.848997][ T45] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 41.890004][ T45] usb 2-1: device descriptor read/8, error -71 [ 42.020038][ T45] usb 2-1: device descriptor read/8, error -71 [ 42.129128][ T45] usb usb2-port1: unable to enumerate USB device [ 42.249964][ T824] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 42.257370][ T824] rust_binder: Write failure EINVAL in pid:82 [ 42.329019][ T308] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 42.489037][ T308] usb 4-1: Using ep0 maxpacket: 32 [ 42.495815][ T308] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 42.504198][ T308] usb 4-1: config 0 has no interface number 0 [ 42.510360][ T308] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 42.522703][ T308] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 42.531785][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.539905][ T308] usb 4-1: Product: syz [ 42.544110][ T308] usb 4-1: Manufacturer: syz [ 42.548691][ T308] usb 4-1: SerialNumber: syz [ 42.554385][ T308] usb 4-1: config 0 descriptor?? [ 42.559715][ T819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.628978][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 42.770600][ T818] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.779068][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 42.785508][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 42.794829][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 42.805402][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 42.814470][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.824202][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 42.834023][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 42.847289][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 42.856456][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.865178][ T9] usb 1-1: config 0 descriptor?? [ 42.985212][ T819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.993814][ T819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.007590][ T308] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 43.025896][ T308] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 43.042605][ T308] asix 4-1:0.188: probe with driver asix failed with error -71 [ 43.051706][ T308] usb 4-1: USB disconnect, device number 15 [ 43.073412][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 43.085673][ T9] usb 1-1: USB disconnect, device number 14 [ 43.094265][ T9] usblp0: removed [ 43.168959][ T66] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 43.320091][ T66] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 43.328268][ T66] usb 2-1: config 0 has no interface number 0 [ 43.336270][ T66] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.349647][ T66] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.360376][ T66] usb 2-1: config 0 interface 1 has no altsetting 0 [ 43.367265][ T66] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 43.376612][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.386791][ T66] usb 2-1: config 0 descriptor?? [ 43.508978][ T9] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 43.678976][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 43.805286][ T66] input: HID 2179:0053 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:2179:0053.0005/input/input9 [ 43.821477][ T9] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 43.839036][ T66] uclogic 0003:2179:0053.0005: input,hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.1-1/input1 [ 43.979000][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 43.984790][ T9] usb usb1-port1: attempt power cycle [ 44.100474][ T306] kernel read not supported for file [fscontext] (pid: 306 comm: kworker/1:2) [ 44.329040][ T9] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 44.349419][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 44.379041][ T66] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.419220][ T306] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 44.479056][ T9] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 44.499430][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 44.504939][ T9] usb usb1-port1: unable to enumerate USB device [ 44.530344][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.538777][ T66] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 44.549774][ T66] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 44.560935][ T66] usb 3-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 44.570023][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.578022][ T66] usb 3-1: Product: syz [ 44.580130][ T306] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1023 [ 44.582219][ T66] usb 3-1: Manufacturer: syz [ 44.595163][ T306] usb 4-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 44.597890][ T66] usb 3-1: SerialNumber: syz [ 44.611852][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.619902][ T306] usb 4-1: Product: syz [ 44.624092][ T306] usb 4-1: Manufacturer: syz [ 44.628775][ T306] usb 4-1: SerialNumber: syz [ 45.637553][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 45.637572][ T36] audit: type=1400 audit(1774855285.640:295): avc: denied { nlmsg_read } for pid=899 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.638785][ T900] netlink: 104 bytes leftover after parsing attributes in process `syz.0.149'. [ 45.680393][ T36] audit: type=1400 audit(1774855285.690:296): avc: denied { relabelfrom } for pid=899 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.700677][ T36] audit: type=1400 audit(1774855285.690:297): avc: denied { relabelto } for pid=899 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.942143][ T9] usb 2-1: USB disconnect, device number 14 [ 45.969145][ T906] netlink: 'syz.1.152': attribute type 11 has an invalid length. [ 45.977315][ T906] netlink: 44 bytes leftover after parsing attributes in process `syz.1.152'. [ 46.002189][ T36] audit: type=1400 audit(1774855286.010:298): avc: denied { read } for pid=907 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.078979][ T308] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 46.230189][ T308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.240797][ T308] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.253628][ T308] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.264320][ T308] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 46.272698][ T308] usb 1-1: Product: syz [ 46.277057][ T308] usb 1-1: SerialNumber: syz [ 46.700156][ T36] audit: type=1400 audit(1774855286.710:299): avc: denied { create } for pid=912 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 46.720341][ T308] cdc_ncm 1-1:1.0: bind() failure [ 46.730428][ T308] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 46.737265][ T36] audit: type=1400 audit(1774855286.740:300): avc: denied { ioctl } for pid=914 comm="syz.1.155" path="socket:[9221]" dev="sockfs" ino=9221 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.761594][ T308] cdc_ncm 1-1:1.1: bind() failure [ 46.925979][ T9] usb 1-1: USB disconnect, device number 19 [ 47.038981][ T308] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 47.086247][ T66] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 47.101945][ T66] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 47.113108][ T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 47.124773][ T66] usb 3-1: USB disconnect, device number 9 [ 47.138480][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.157769][ T306] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 47.175669][ T308] usb 2-1: device descriptor read/64, error -71 [ 47.183731][ T306] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 47.207643][ T306] usb 4-1: USB disconnect, device number 16 [ 47.217097][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.288425][ T939] cgroup: Name too long [ 47.293357][ T939] cgroup: Name too long [ 47.329660][ T944] SELinux: policydb string does not match my string SE Linux [ 47.329947][ T36] audit: type=1400 audit(1774855287.340:301): avc: denied { load_policy } for pid=943 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 47.337311][ T944] SELinux: failed to load policy [ 47.349245][ T944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 47.372600][ T944] SELinux: policydb string length -436535288 does not match expected length 8 [ 47.381640][ T944] SELinux: failed to load policy [ 47.428981][ T308] usb 2-1: device descriptor read/64, error -71 [ 47.598823][ T958] netlink: 9 bytes leftover after parsing attributes in process `syz.2.167'. [ 47.608117][ T958] gretap0: entered promiscuous mode [ 47.614991][ T958] netlink: 5 bytes leftover after parsing attributes in process `syz.2.167'. [ 47.623933][ T306] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 47.624002][ T958] 0{X: renamed from gretap0 [ 47.637952][ T958] 0{X: left promiscuous mode [ 47.643127][ T958] 0{X: entered allmulticast mode [ 47.649221][ T958] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 47.680582][ T962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.689386][ T962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.698036][ T960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.706644][ T960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.706662][ T308] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 47.715344][ T66] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 47.799020][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 47.805467][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.816434][ T306] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 47.825529][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 47.833653][ T306] usb 4-1: SerialNumber: syz [ 47.839163][ T306] usb 4-1: config 0 descriptor?? [ 47.844978][ T306] hub 4-1:0.0: bad descriptor, ignoring hub [ 47.851135][ T306] hub 4-1:0.0: probe with driver hub failed with error -5 [ 47.858458][ T306] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 47.865961][ T308] usb 2-1: device descriptor read/64, error -71 [ 47.872908][ T306] usb 4-1: Detected SIO [ 47.877550][ T306] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.888969][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 47.895437][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.906811][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.916601][ T66] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 47.925848][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.937951][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 47.950311][ T66] usb 1-1: config 0 descriptor?? [ 48.098977][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 48.105767][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.116143][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.118970][ T308] usb 2-1: device descriptor read/64, error -71 [ 48.126670][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.140811][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.148810][ T9] usb 3-1: Product: syz [ 48.153106][ T9] usb 3-1: Manufacturer: syz [ 48.157845][ T9] usb 3-1: SerialNumber: syz [ 48.159048][ T306] usb 4-1: USB disconnect, device number 17 [ 48.169393][ T306] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.179037][ T306] ftdi_sio 4-1:0.0: device disconnected [ 48.239112][ T308] usb usb2-port1: attempt power cycle [ 48.365165][ T36] audit: type=1400 audit(1774855288.370:302): avc: denied { write } for pid=951 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 48.371958][ T66] ntrig 0003:1B96:0008.0006: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0 [ 48.570657][ T66] usb 1-1: USB disconnect, device number 20 [ 48.579159][ T308] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 48.601836][ T308] usb 2-1: device descriptor read/8, error -71 [ 48.733675][ T308] usb 2-1: device descriptor read/8, error -71 [ 48.860045][ T36] audit: type=1400 audit(1774855288.870:303): avc: denied { associate } for pid=968 comm="syz.3.170" name="#211" dev="tmpfs" ino=211 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cpu_online_t:s0" [ 48.903418][ T9] usb 3-1: 0:2 : does not exist [ 48.918427][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 48.949800][ T9] usb 3-1: USB disconnect, device number 10 [ 48.960776][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.999018][ T308] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 49.020131][ T308] usb 2-1: device descriptor read/8, error -71 [ 49.094163][ T36] audit: type=1400 audit(1774855289.100:304): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.121904][ T979] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 49.129811][ T979] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 49.168228][ T308] usb 2-1: device descriptor read/8, error -71 [ 49.248968][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 49.279093][ T308] usb usb2-port1: unable to enumerate USB device [ 49.408968][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 49.418991][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 49.427604][ T9] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 49.444548][ T9] usb 3-1: config 0 has no interface number 1 [ 49.457217][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 49.478201][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 49.501840][ T9] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 49.525269][ T9] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 49.545705][ T9] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.572884][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 49.589004][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 49.595501][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.596417][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 49.606746][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.627926][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.638692][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 49.641211][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 49.660360][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.669598][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 49.672821][ T31] usb 1-1: config 0 descriptor?? [ 49.688656][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.704383][ T9] usb 3-1: Product: syz [ 49.712961][ T9] usb 3-1: Manufacturer: syz [ 49.717765][ T9] usb 3-1: SerialNumber: syz [ 49.733137][ T9] usb 3-1: config 0 descriptor?? [ 49.750553][ T976] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.824561][ T986] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 49.847821][ T988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 49.860179][ T988] bridge_slave_1: left allmulticast mode [ 49.866286][ T988] bridge_slave_1: left promiscuous mode [ 49.872467][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.880296][ T988] bridge_slave_0: left allmulticast mode [ 49.885999][ T988] bridge_slave_0: left promiscuous mode [ 49.891763][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.966483][ T975] SELinux: policydb magic number 0x65737566 does not match expected magic number 0xf97cff8c [ 49.976907][ T975] SELinux: failed to load policy [ 49.988648][ T306] usb 3-1: USB disconnect, device number 11 [ 50.030836][ T1005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.039860][ T1005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.087020][ T31] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 50.095914][ T31] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 50.135208][ T1010] can0: slcan on ttyS3. [ 50.162319][ T1010] can0 (unregistered): slcan off ttyS3. [ 50.199239][ T66] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 50.229025][ T1023] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 50.242323][ T1023] overlayfs: missing 'lowerdir' [ 50.288300][ T31] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 50.298228][ T31] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 50.331588][ T31] microsoft 0003:045E:07DA.0007: no inputs found [ 50.344731][ T31] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 50.378975][ T306] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 50.391589][ T66] usb 2-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 50.405538][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.425715][ T66] usb 2-1: Product: syz [ 50.437316][ T66] usb 2-1: Manufacturer: syz [ 50.448849][ T66] usb 2-1: SerialNumber: syz [ 50.470605][ T1054] veth1_vlan: mtu less than device minimum [ 50.517394][ T31] usb 1-1: USB disconnect, device number 21 [ 50.539121][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 50.545510][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.556603][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.566696][ T306] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.579926][ T306] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 50.589087][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.599337][ T306] usb 3-1: config 0 descriptor?? [ 50.663544][ T66] usb 2-1: USB disconnect, device number 19 [ 50.699825][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.739767][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 50.739787][ T36] audit: type=1400 audit(1774855290.750:314): avc: denied { name_bind } for pid=1070 comm="syz.3.191" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 50.805287][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.814757][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.818114][ T1073] overlayfs: missing 'lowerdir' [ 50.824676][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.836991][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.847223][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.855879][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.864181][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.873355][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.888478][ T306] usbhid 3-1:0.0: can't add hid device: -71 [ 50.897458][ T306] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 50.906609][ T306] usb 3-1: USB disconnect, device number 12 [ 50.987905][ T36] audit: type=1400 audit(1774855290.990:315): avc: denied { setattr } for pid=1080 comm="syz.3.194" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.037461][ T36] audit: type=1400 audit(1774855291.040:316): avc: denied { setopt } for pid=1086 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.269109][ T66] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 51.329057][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 51.409023][ T306] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 51.424044][ T66] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.435122][ T66] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 51.437665][ T36] audit: type=1400 audit(1774855291.440:317): avc: denied { map } for pid=1103 comm="syz.2.201" path="socket:[8717]" dev="sockfs" ino=8717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.445669][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 51.469173][ T36] audit: type=1400 audit(1774855291.450:318): avc: denied { read accept } for pid=1103 comm="syz.2.201" path="socket:[8717]" dev="sockfs" ino=8717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.501474][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.509674][ T66] usb 1-1: SerialNumber: syz [ 51.518991][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 51.524348][ T66] usb 1-1: bad CDC descriptors [ 51.529606][ T66] usb-storage 1-1:1.0: USB Mass Storage device detected [ 51.537017][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.548027][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.558484][ T66] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 51.566441][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 51.573155][ T66] scsi host1: usb-storage 1-1:1.0 [ 51.582234][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 51.591471][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.600051][ T9] usb 4-1: config 0 descriptor?? [ 51.610233][ T306] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 51.619594][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.628322][ T306] usb 2-1: config 0 descriptor?? [ 51.634543][ T306] usb 2-1: selecting invalid altsetting 1 [ 51.642327][ T306] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 51.646189][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.725677][ T66] usb 1-1: USB disconnect, device number 22 [ 52.006638][ T1087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.015325][ T1087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.024622][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 52.032109][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 52.038059][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 52.048935][ T9] usb 4-1: USB disconnect, device number 18 [ 52.239633][ T1114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.243736][ T1114] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.250398][ T1114] rust_binder: Read failure Err(EFAULT) in pid:157 [ 52.258843][ T36] audit: type=1400 audit(1774855292.260:319): avc: denied { transfer } for pid=1113 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 52.437617][ T1127] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.498990][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 52.552183][ T1129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 52.597361][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 52.638984][ T9] usb 1-1: device descriptor read/64, error -71 [ 52.839288][ T36] audit: type=1400 audit(1774855292.850:320): avc: denied { mounton } for pid=1135 comm="syz.3.208" path="/52/file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 52.879200][ T9] usb 1-1: device descriptor read/64, error -71 [ 53.118972][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 53.258965][ T9] usb 1-1: device descriptor read/64, error -71 [ 53.508955][ T9] usb 1-1: device descriptor read/64, error -71 [ 53.608982][ T306] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.629098][ T9] usb usb1-port1: attempt power cycle [ 53.685304][ T1145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 53.749017][ T306] usb 3-1: device descriptor read/64, error -71 [ 53.969011][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 53.990090][ T9] usb 1-1: device descriptor read/8, error -71 [ 54.008984][ T306] usb 3-1: device descriptor read/64, error -71 [ 54.120067][ T9] usb 1-1: device descriptor read/8, error -71 [ 54.183010][ T308] usb 2-1: USB disconnect, device number 20 [ 54.249039][ T306] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 54.358992][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 54.379052][ T306] usb 3-1: device descriptor read/64, error -71 [ 54.380055][ T9] usb 1-1: device descriptor read/8, error -71 [ 54.478982][ T308] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 54.520542][ T9] usb 1-1: device descriptor read/8, error -71 [ 54.619076][ T306] usb 3-1: device descriptor read/64, error -71 [ 54.629161][ T9] usb usb1-port1: unable to enumerate USB device [ 54.629166][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 54.641865][ T308] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.652000][ T308] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 54.661980][ T308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 54.673147][ T308] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.687764][ T308] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 54.696869][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.704902][ T308] usb 2-1: Product: syz [ 54.709166][ T308] usb 2-1: Manufacturer: syz [ 54.713774][ T308] usb 2-1: SerialNumber: syz [ 54.719630][ T1148] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 54.729218][ T306] usb usb3-port1: attempt power cycle [ 54.779049][ T307] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 54.927511][ T1148] capability: warning: `syz.1.212' uses deprecated v2 capabilities in a way that may be insecure [ 54.930158][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.942649][ T308] usb 2-1: MIDIStreaming interface descriptor not found [ 54.949749][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.960265][ T308] usb 2-1: USB disconnect, device number 21 [ 54.967927][ T307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.980375][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.984809][ T307] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.10 [ 55.009730][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.018952][ T307] usb 4-1: config 0 descriptor?? [ 55.069042][ T306] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 55.090051][ T306] usb 3-1: device descriptor read/8, error -71 [ 55.220691][ T306] usb 3-1: device descriptor read/8, error -71 [ 55.250897][ T293] ------------[ cut here ]------------ [ 55.256399][ T293] WARNING: CPU: 0 PID: 293 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 55.265801][ T293] Modules linked in: [ 55.269746][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 55.281482][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.291755][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 55.297453][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 75 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 48 3f ff <0f> 0b e9 3e ff ff ff e8 ea 48 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 55.317507][ T293] RSP: 0018:ffffc9000126f968 EFLAGS: 00010293 [ 55.323655][ T293] RAX: ffffffff824861ba RBX: 0000000000000000 RCX: ffff88810c294c00 [ 55.331692][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.339804][ T293] RBP: ffffc9000126f990 R08: ffff888113a1045f R09: 1ffff1102274208b [ 55.347805][ T293] R10: dffffc0000000000 R11: ffffed102274208c R12: 0000000000000000 [ 55.356101][ T293] R13: dffffc0000000000 R14: ffff888113a103c0 R15: ffff8881138dbdd0 [ 55.364139][ T293] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 55.373116][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.379828][ T293] CR2: 00007fff88269b90 CR3: 0000000103bd6000 CR4: 00000000003526b0 [ 55.387819][ T293] Call Trace: [ 55.391228][ T293] [ 55.394273][ T293] ovl_do_remove+0x81b/0xda0 [ 55.399005][ T293] ? ovl_set_redirect+0x780/0x780 [ 55.404071][ T293] ? down_write+0xee/0x2b0 [ 55.408689][ T293] ? __cfi_down_write+0x10/0x10 [ 55.413591][ T293] ovl_rmdir+0x1e/0x30 [ 55.417777][ T293] vfs_rmdir+0x3e3/0x560 [ 55.422048][ T293] incfs_kill_sb+0x109/0x230 [ 55.426679][ T293] deactivate_locked_super+0xd5/0x2a0 [ 55.432195][ T293] deactivate_super+0xb8/0xe0 [ 55.436938][ T293] cleanup_mnt+0x406/0x4a0 [ 55.441397][ T293] __cleanup_mnt+0x1d/0x40 [ 55.445838][ T293] task_work_run+0x1e5/0x260 [ 55.450478][ T293] ? __cfi_task_work_run+0x10/0x10 [ 55.455615][ T293] ? free_nsproxy+0x223/0x290 [ 55.460514][ T293] do_exit+0x9ad/0x2720 [ 55.464738][ T293] ? __cfi_do_exit+0x10/0x10 [ 55.469180][ T306] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.469487][ T293] ? __kasan_check_write+0x18/0x20 [ 55.482334][ T293] ? _raw_spin_lock_irq+0x93/0x120 [ 55.487573][ T293] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 55.493184][ T293] ? zap_other_threads+0x334/0x370 [ 55.498352][ T293] do_group_exit+0x229/0x2f0 [ 55.500156][ T306] usb 3-1: device descriptor read/8, error -71 [ 55.503193][ T293] __x64_sys_exit_group+0x43/0x50 [ 55.514463][ T293] x64_sys_call+0x2ed2/0x2ee0 [ 55.519183][ T293] do_syscall_64+0x57/0xf0 [ 55.523624][ T293] ? clear_bhb_loop+0x50/0xa0 [ 55.528320][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.534304][ T293] RIP: 0033:0x7fa2c9b9c819 [ 55.538768][ T293] Code: Unable to access opcode bytes at 0x7fa2c9b9c7ef. [ 55.545821][ T293] RSP: 002b:00007fff8826a0d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 55.554464][ T293] RAX: ffffffffffffffda RBX: 00007fa2c9c3206d RCX: 00007fa2c9b9c819 [ 55.562503][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 55.570623][ T293] RBP: 0000000000000028 R08: 0000000000000000 R09: 00007fa2c9c32048 [ 55.578756][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8826b390 [ 55.587114][ T293] R13: 00007fa2c9c32048 R14: 000000000000cc1f R15: 00007fff8826c460 [ 55.595161][ T293] [ 55.598293][ T293] ---[ end trace 0000000000000000 ]--- [ 55.604331][ T293] ------------[ cut here ]------------ [ 55.605640][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.609884][ T293] WARNING: CPU: 1 PID: 293 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 55.617304][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.627040][ T293] Modules linked in: [ 55.627061][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 55.627097][ T293] Tainted: [W]=WARN [ 55.634532][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.638455][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.651618][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.655454][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 55.662889][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.673023][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 75 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 48 3f ff <0f> 0b e9 3e ff ff ff e8 ea 48 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 55.673045][ T293] RSP: 0018:ffffc9000126f968 EFLAGS: 00010293 [ 55.680891][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.686051][ T293] RAX: ffffffff824861ba RBX: 0000000000000000 RCX: ffff88810c294c00 [ 55.693750][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.713340][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.719925][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.726710][ T293] RBP: ffffc9000126f990 R08: ffff888113a1045f R09: 1ffff1102274208b [ 55.734827][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.742063][ T293] R10: dffffc0000000000 R11: ffffed102274208c R12: 0000000000000000 [ 55.742087][ T293] R13: dffffc0000000000 R14: ffff888113a103c0 R15: ffff8881138dbdd0 [ 55.742103][ T293] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 55.742124][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.752584][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.757483][ T293] CR2: 00007f7c833e92f8 CR3: 000000010b712000 CR4: 00000000003526b0 [ 55.765811][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.772905][ T293] Call Trace: [ 55.772915][ T293] [ 55.772924][ T293] ovl_do_remove+0x81b/0xda0 [ 55.781276][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.789125][ T293] ? ovl_set_redirect+0x780/0x780 [ 55.798284][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.804690][ T293] ? down_write+0xee/0x2b0 [ 55.812908][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.820414][ T293] ? __cfi_down_write+0x10/0x10 [ 55.828019][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.831108][ T293] ovl_rmdir+0x1e/0x30 [ 55.834252][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.838717][ T293] vfs_rmdir+0x3e3/0x560 [ 55.838745][ T293] incfs_kill_sb+0x1a0/0x230 [ 55.846391][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.851063][ T293] deactivate_locked_super+0xd5/0x2a0 [ 55.851093][ T293] deactivate_super+0xb8/0xe0 [ 55.858609][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.863430][ T293] cleanup_mnt+0x406/0x4a0 [ 55.863459][ T293] __cleanup_mnt+0x1d/0x40 [ 55.863478][ T293] task_work_run+0x1e5/0x260 [ 55.863502][ T293] ? __cfi_task_work_run+0x10/0x10 [ 55.871703][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.875732][ T293] ? free_nsproxy+0x223/0x290 [ 55.883271][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.887104][ T293] do_exit+0x9ad/0x2720 [ 55.894675][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.898654][ T293] ? __cfi_do_exit+0x10/0x10 [ 55.903439][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.910574][ T293] ? __kasan_check_write+0x18/0x20 [ 55.910616][ T293] ? _raw_spin_lock_irq+0x93/0x120 [ 55.916448][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.921059][ T293] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 55.928600][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.932780][ T293] ? zap_other_threads+0x334/0x370 [ 55.932810][ T293] do_group_exit+0x229/0x2f0 [ 55.937491][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.942028][ T293] __x64_sys_exit_group+0x43/0x50 [ 55.942074][ T293] x64_sys_call+0x2ed2/0x2ee0 [ 55.947599][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.954555][ T293] do_syscall_64+0x57/0xf0 [ 55.959589][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.966522][ T293] ? clear_bhb_loop+0x50/0xa0 [ 55.970944][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.977982][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.982988][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 55.990002][ T293] RIP: 0033:0x7fa2c9b9c819 [ 55.995356][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 56.000242][ T293] Code: Unable to access opcode bytes at 0x7fa2c9b9c7ef. [ 56.000256][ T293] RSP: 002b:00007fff8826a0d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.008045][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 56.013226][ T293] RAX: ffffffffffffffda RBX: 00007fa2c9c3206d RCX: 00007fa2c9b9c819 [ 56.013250][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 56.020952][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 56.025736][ T293] RBP: 0000000000000028 R08: 0000000000000000 R09: 00007fa2c9c32048 [ 56.025756][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8826b390 [ 56.030573][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 56.037652][ T293] R13: 00007fa2c9c32048 R14: 000000000000cc1f R15: 00007fff8826c460 [ 56.037675][ T293] [ 56.037684][ T293] ---[ end trace 0000000000000000 ]--- [ 56.043067][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 56.070037][ T306] usb 3-1: device descriptor read/8, error -71 [ 56.071660][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 56.189113][ T306] usb usb3-port1: unable to enumerate USB device [ 56.191568][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 56.225930][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 56.233310][ T307] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0 [ 56.242542][ T307] dragonrise 0003:0079:0011.0008: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 56.300667][ T12] bridge_slave_1: left allmulticast mode [ 56.306452][ T12] bridge_slave_1: left promiscuous mode [ 56.312352][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.320303][ T12] bridge_slave_0: left allmulticast mode [ 56.326121][ T12] bridge_slave_0: left promiscuous mode [ 56.332149][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.442671][ T12] veth1_macvtap: left promiscuous mode [ 56.448447][ T12] veth0_vlan: left promiscuous mode [ 57.552758][ T307] usb 4-1: USB disconnect, device number 19